Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/6c7a9948a066e2dc97abef2110f888bc21024def.roa
File: 6c7a9948a066e2dc97abef2110f888bc21024def.roa (raw, json)
Hash identifier: XCGXUiczZyVPTQ5XCbpa1fAd/Y67juhNufaC0XS/Vbw=
Subject key identifier: 2C:73:46:F1:97:D6:77:D4:17:FC:EB:80:75:AB:B3:87:82:C4:FC:5E
Certificate issuer: /CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
Certificate serial: 0A220F
Authority key identifier: 3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/6c7a9948a066e2dc97abef2110f888bc21024def.roa
Signing time: Fri 07 Jan 2022 16:24:03 +0000
ROA not before: Thu 06 Jan 2022 03:00:00 +0000
ROA not after: Sat 06 Jan 2024 03:00:00 +0000
asID: 400039
IP address blocks: 138.99.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 664079 (0xa220f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e66fbaafbfa93934b71ee8599cbe9373aa212c99
Validity
Not Before: Jan 6 03:00:00 2022 GMT
Not After : Jan 6 03:00:00 2024 GMT
Subject: CN=6c7a9948a066e2dc97abef2110f888bc21024def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:c1:80:29:5b:1e:fe:c5:40:11:e3:5e:e9:
3f:02:69:c0:40:ac:50:aa:49:fd:a7:4f:bc:fd:50:
2d:a8:00:d9:f0:66:f4:0b:92:3a:9e:cd:15:c8:f8:
55:d8:5e:7a:ff:49:0c:27:6e:16:ad:07:67:ac:32:
68:c2:ac:03:b9:48:ee:19:6a:75:c1:cb:07:3f:87:
c7:27:58:e9:ca:c1:57:83:df:f7:6e:1f:43:ea:53:
0e:36:fd:01:e3:1b:04:dd:07:23:92:97:e1:3f:02:
e7:de:54:39:5a:85:c8:b1:8b:52:10:75:66:35:6e:
2b:44:f8:67:15:95:2f:04:be:f7:d6:c3:0e:89:c9:
87:d0:65:b9:8b:e1:8a:2e:58:81:65:7d:bd:0b:68:
40:84:11:d4:49:07:b0:51:e5:b7:10:e8:c0:2a:87:
13:c0:bb:77:a5:72:df:b9:6d:51:e0:ba:1d:e8:e6:
01:60:79:46:44:a2:2a:4c:df:f3:09:e6:a1:96:99:
97:63:3d:d2:9f:f9:b1:b8:b0:00:3d:90:df:f0:dc:
1e:8e:97:cd:1f:76:c3:d0:dc:1d:f0:3d:1a:06:c8:
ba:45:4f:47:c7:08:48:3e:a2:f0:9a:03:ea:a5:53:
2f:dc:c5:09:5c:d8:e7:82:27:08:31:21:4f:9f:0f:
82:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:46:F1:97:D6:77:D4:17:FC:EB:80:75:AB:B3:87:82:C4:FC:5E
X509v3 Authority Key Identifier:
keyid:3F:1C:AE:E0:BB:D2:AD:96:EA:8A:E7:04:61:CE:75:86:B0:DC:7D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66fbaafbfa93934b71ee8599cbe9373aa212c99.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/6c7a9948a066e2dc97abef2110f888bc21024def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/50c2b991-38f6-4a28-b8c0-a40fe99a98ff/e66fbaafbfa93934b71ee8599cbe9373aa212c99.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.99.144.0/24
Signature Algorithm: sha256WithRSAEncryption
22:84:ed:db:1d:af:04:27:7e:32:f0:fe:cf:64:a2:56:57:1d:
be:a7:f1:8c:30:54:8a:4c:28:57:05:b1:33:e1:d0:79:80:d4:
71:4c:04:d7:a8:0d:fd:70:a4:47:47:10:b6:38:ba:a8:26:80:
59:c6:89:d1:1d:9f:39:b4:8f:c5:d8:ff:08:14:fa:6d:52:1e:
de:7d:40:8e:8e:a3:ab:1c:fd:78:4e:77:8d:b0:7d:86:ce:b4:
ad:18:25:86:48:8f:8c:6a:97:75:da:d5:dd:57:f1:34:d0:3e:
17:0b:e3:75:32:93:e6:e6:90:1a:f1:8e:02:33:a4:1c:de:8c:
40:39:48:9e:ef:37:ca:2f:c9:a7:ff:bf:69:f5:0c:6f:91:e6:
d2:d8:2d:3f:62:46:a8:21:9d:0a:2d:49:21:4d:a6:1a:41:51:
45:57:0e:48:c6:b3:98:11:ae:a3:32:21:10:b0:60:ce:6c:3c:
65:89:e2:25:b5:3a:fd:b6:58:78:ae:c7:a0:df:6b:8f:f9:0e:
18:5f:13:1d:18:8a:57:52:e2:39:60:61:16:2d:9a:ef:45:50:
18:23:e7:63:73:d2:f4:e9:41:1b:aa:a3:91:ce:48:57:72:22:
1b:c1:a3:ac:84:93:61:ed:bd:b6:aa:6c:42:a5:df:3b:a0:16:
f9:da:86:6a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDCiIPMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGU2
NmZiYWFmYmZhOTM5MzRiNzFlZTg1OTljYmU5MzczYWEyMTJjOTkwHhcNMjIwMTA2
MDMwMDAwWhcNMjQwMTA2MDMwMDAwWjAzMTEwLwYDVQQDEyg2YzdhOTk0OGEwNjZl
MmRjOTdhYmVmMjExMGY4ODhiYzIxMDI0ZGVmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArZ3BgClbHv7FQBHjXuk/AmnAQKxQqkn9p0+8/VAtqADZ8Gb0
C5I6ns0VyPhV2F56/0kMJ24WrQdnrDJowqwDuUjuGWp1wcsHP4fHJ1jpysFXg9/3
bh9D6lMONv0B4xsE3QcjkpfhPwLn3lQ5WoXIsYtSEHVmNW4rRPhnFZUvBL731sMO
icmH0GW5i+GKLliBZX29C2hAhBHUSQewUeW3EOjAKocTwLt3pXLfuW1R4Lod6OYB
YHlGRKIqTN/zCeahlpmXYz3Sn/mxuLAAPZDf8NwejpfNH3bD0Nwd8D0aBsi6RU9H
xwhIPqLwmgPqpVMv3MUJXNjngicIMSFPnw+C8QIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFCxzRvGX1nfUF/zrgHWrs4eCxPxeMB8GA1UdIwQYMBaAFD8cruC70q2W6orn
BGHOdYaw3H1ZMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZTY2ZmJh
YWZiZmE5MzkzNGI3MWVlODU5OWNiZTkzNzNhYTIxMmM5OS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNTBjMmI5OTEtMzhmNi00YTI4LWI4YzAtYTQwZmU5
OWE5OGZmLzZjN2E5OTQ4YTA2NmUyZGM5N2FiZWYyMTEwZjg4OGJjMjEwMjRkZWYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81MGMyYjk5MS0zOGY2LTRhMjgtYjhjMC1hNDBm
ZTk5YTk4ZmYvZTY2ZmJhYWZiZmE5MzkzNGI3MWVlODU5OWNiZTkzNzNhYTIxMmM5
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAIpjkDANBgkqhkiG9w0BAQsFAAOCAQEAIoTt2x2vBCd+MvD+
z2SiVlcdvqfxjDBUikwoVwWxM+HQeYDUcUwE16gN/XCkR0cQtji6qCaAWcaJ0R2f
ObSPxdj/CBT6bVIe3n1Ajo6jqxz9eE53jbB9hs60rRglhkiPjGqXddrV3VfxNNA+
FwvjdTKT5uaQGvGOAjOkHN6MQDlInu83yi/Jp/+/afUMb5Hm0tgtP2JGqCGdCi1J
IU2mGkFRRVcOSMazmBGuozIhELBgzmw8ZYniJbU6/bZYeK7HoN9rj/kOGF8THRiK
V1LiOWBhFi2a70VQGCPnY3PS9OlBG6qjkc5IV3IiG8GjrISTYe29tqpsQqXfO6AW
+dqGag==
-----END CERTIFICATE-----
Generated at Fri Jan 5 11:29:39 2024 by rpki-client on console-ams.rpki-client.org